Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Multiple Invalid Users Failing To Authenticate From Host Using NTLM

Password Spraying, Brute Force

DNS Exfiltration Using Nslookup App

Exfiltration Over Alternative Protocol

Office Document Executing Macro Code

Phishing, Spearphishing Attachment

Windows Disabled Users Failing To Authenticate Kerberos

Password Spraying, Brute Force

Windows Invalid Users Failed Authentication via Kerberos

Password Spraying, Brute Force

Splunk Threat Reasearch Team (STRT)

Recent Posts

Multiple Invalid Users Failing To Authenticate From Host Using NTLM

DNS Exfiltration Using Nslookup App

Office Document Executing Macro Code

Windows Disabled Users Failing To Authenticate Kerberos

Windows Invalid Users Failed Authentication via Kerberos